lazyweb-optimize-paywall

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). Yes — the URLs include a direct install.sh script (and the skill even instructs piping it to bash), which is a high-risk distribution vector for arbitrary code execution; /mcp appears to be a tool endpoint tied to that installer, so together they are suspicious until the domain and script are verified.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). This skill calls the hosted Lazyweb MCP (https://www.lazyweb.com/mcp) at runtime to obtain synthesis results and winner.mockup_prompt values that directly control the agent's prompts (and even recommends running curl -fsSL https://www.lazyweb.com/install.sh | bash to fetch-and-execute installer code if the MCP is missing), so these external URLs are runtime dependencies that both control prompts and can execute remote code.